ad-ldap-attack

What problem does it solve?

Active Directory LDAP environments expose critical credential data and misconfigurations that adversaries can exploit. By orchestrating recon, enumeration, and credential harvesting within AD, this skill guides defenders and red teams through the full lifecycle of AD attacks.

Core Features & Use Cases

• Recon and enumeration: identify domain structure, domain controllers, users, groups, SPNs, trusts, and ACLs.
• Credential harvesting & auditing: collect AS-REP roastable accounts, SPN-based tickets, and DCSync-like data for analysis (in authorized engagements).
• Lateral movement planning: map attack paths with BloodHound and related tooling to demonstrate potential impact in an enterprise AD.
• Use Case: For a corporate AD with 10k users, run LDAP queries and BloodHound ingestion to visualize attack paths to Domain Admins.

Quick Start

Run the AD LDAP attack workflow against a permitted target to enumerate domain objects and collect credential artifacts for assessment.